Approved changes feed: RSS · Atom

cpe:2.3:a:cksource:ckeditor:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorCksource (3712f781-219f-59c2-bc43-1813c18cf6c8)
ProductCkeditor (2faccacb-c540-5d78-9f48-a12b614f5db2)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/ckeditor-for-wordpress/ckeditor-for-wordpress purl2cpe 2026-06-01 10:10:59.728606
pkg:github/wp-plugins/ckeditor-for-wordpress purl2cpe 2026-06-01 10:10:59.728609
pkg:sourceforge/fckeditor purl2cpe 2026-06-01 10:10:59.728612

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-4771 vulnerable 2026-06-08 06:16:14.534256 Cross-Site Scripting vulnerability in CKSource CKEditor
MEDIUM (6.1)
A Cross-Site scripting vulnerability has been found in CKSource CKEditor affecting versions 4.15.1 and earlier. An attacker could send malicious javascript code through the /ckeditor/samples/old/ajax.html file and retrieve an authorized user's information.
Published: 2023-11-16T14:08:47.418Z
Updated: 2024-10-01T14:50:24.839Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.